Morphing Meerkat phishing kit can spoof more than 100 different brands
It’s been used to send “thousands” of emails, experts warn
Defenses includes adding a strong layer of DNS security
Cybercriminals have created a new technique to serve phishing emails to business users which are almost indistinguishable from legitimate messages.
Cybersecurity researchers Infoblox spotted the Phishing-as-a-Service (PhaaS) kit, built by a threat actor dubbed Morphing Meerkat, which deploys DNS Mail exchange (MX) records, dynamically serving fake login pages.